Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS395111.roa
File:                     AS395111.roa (raw, json)
Hash identifier:          KyKV4bKdnqvEVTdz2T+Qjg38x9NbbESCR6lstTkfhlg=
Subject key identifier:   39:8F:FF:7B:AA:F5:7B:23:08:C9:0F:8C:68:1D:9B:C5:6E:E8:55:36
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       53E94FCE092448C4031DE08F05F34915C08840BB
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS395111.roa
Signing time:             Sat 13 Sep 2025 11:20:17 +0000
ROA not before:           Sat 13 Sep 2025 11:15:17 +0000
ROA not after:            Sat 12 Sep 2026 11:20:17 +0000
asID:                     395111
IP address blocks:        205.234.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 00:03:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:e9:4f:ce:09:24:48:c4:03:1d:e0:8f:05:f3:49:15:c0:88:40:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Sep 13 11:15:17 2025 GMT
            Not After : Sep 12 11:20:17 2026 GMT
        Subject: CN=398FFF7BAAF57B2308C90F8C681D9BC56EE85536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:eb:54:a3:fb:01:44:1b:26:00:b0:f3:d3:7b:
                    7e:84:ff:1d:54:dd:bf:d2:55:78:2a:27:fd:78:c7:
                    46:d9:ba:b7:66:9f:0c:44:72:93:ed:3b:ef:cb:cb:
                    f9:e9:83:ad:5a:04:16:f7:67:51:10:f4:ea:bd:7f:
                    a8:f9:8c:dc:74:1d:ac:6f:4f:ac:1d:29:dd:24:c8:
                    4e:a4:a6:de:c7:43:41:62:e1:3d:c1:f6:a1:89:7e:
                    d7:24:37:4f:33:1c:6e:a3:ba:44:5c:be:22:df:78:
                    fa:52:df:a4:ac:f5:bc:17:76:d4:fd:dc:1c:b8:4d:
                    1e:03:97:f7:87:b1:b8:29:1e:b5:70:73:11:e2:e7:
                    0e:db:5d:36:14:d3:9c:24:ec:a9:ff:6c:c0:4c:ec:
                    8f:aa:2e:03:b0:7b:d0:a0:74:e1:b2:3d:e5:fe:0f:
                    1d:90:1c:4c:4a:d9:42:5b:51:67:3e:2d:1e:53:13:
                    7d:37:36:f5:81:68:96:6c:87:60:cc:3b:47:47:4d:
                    de:dd:9c:5d:6c:4b:bf:a2:67:57:57:66:57:10:6e:
                    4b:7c:e8:80:b7:89:ac:c6:23:61:f4:44:31:35:59:
                    e0:f2:ca:9a:bc:a2:45:70:f2:31:df:f0:d3:14:2f:
                    14:68:bb:32:a5:8c:f4:06:3d:2c:43:a0:98:11:3b:
                    98:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8F:FF:7B:AA:F5:7B:23:08:C9:0F:8C:68:1D:9B:C5:6E:E8:55:36
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS395111.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.234.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:1d:cf:a9:e8:42:ef:88:f1:5c:90:cb:68:57:1a:70:70:66:
         ad:cd:a8:af:1d:8e:a2:32:c0:78:37:09:97:92:44:09:6a:19:
         60:0d:1b:82:4f:c6:ea:6d:c2:e5:18:cb:43:bb:52:48:b6:c1:
         bf:6e:25:00:fd:53:8f:19:12:a4:08:82:2d:fc:05:2f:01:78:
         11:c3:1c:66:f0:d6:85:75:c9:c2:95:11:d7:83:cb:05:8b:b3:
         fd:59:ce:12:5d:a2:97:21:42:c7:7a:0b:80:6e:b4:1f:5d:c6:
         fc:a9:93:3c:29:14:7d:5c:df:81:e6:f6:47:d9:ec:02:77:33:
         3f:4d:b3:10:6c:19:d2:ac:03:dc:b4:da:a0:73:91:5e:bc:6b:
         2c:64:31:1a:02:c7:e3:72:04:b8:6f:61:38:76:20:e0:3e:c2:
         a9:c4:10:cb:34:2c:dd:b5:30:94:31:a5:8b:09:6a:06:5a:62:
         8c:8d:b8:0f:67:52:4a:da:e9:9a:2f:2f:da:26:98:62:ac:5d:
         40:36:6f:14:1f:10:40:1c:14:ae:10:1f:e1:7b:45:64:be:e0:
         41:22:12:f9:36:23:3f:19:30:99:fb:d4:4b:fe:b4:5b:8c:bb:
         04:91:d5:49:81:00:49:c6:e0:83:4b:0f:d5:b0:76:79:53:3f:
         d7:20:fd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 05:23:34 2025 by rpki-client